CVE-2011-1070

v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
v86d_projectv86d
𝑥
< 0.1.10
debiandebian_linux
8.0
debiandebian_linux
9.0
debiandebian_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
v86d
bullseye
0.1.10-1
fixed
sid
0.1.10-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
v86d
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
ignored
maverick
ignored
lucid
ignored
hardy
dne
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/cve-2011-1070
https://seclists.org/oss-sec/2011/q1/315
https://security-tracker.debian.org/tracker/CVE-2011-1070
https://access.redhat.com/security/cve/cve-2011-1070
https://seclists.org/oss-sec/2011/q1/315
https://security-tracker.debian.org/tracker/CVE-2011-1070